LinuxQuestions.org - Is this Apache DDOS attack?

Page 2 of 2

Show 50 post(s) from this thread on one page

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - Is this Apache DDOS attack? (https://www.linuxquestions.org/questions/linux-security-4/is-this-apache-ddos-attack-885412/)

unSpawn

06-13-2011 06:55 PM

Quote:

Originally Posted by saharabear (Post 4381608)

I do not think fail2ban should solve these type of ip address.

Indeed it shouldn't. Try using a regex like

Code:

failregex = ^(?:(?![0-9\.]* -.*"[A-Z]* /)<HOST>)

as listed in the fail2ban wiki HOWTO_apache_proxy_filter and please do post information about listening local services and their configuration (as in 'grep ^# /path/to/configurationfile|grep .').

colucix

06-15-2011 10:09 AM

Moved: This thread is more suitable in Linux - Security and has been moved accordingly to help your thread/question get the exposure it deserves.

All times are GMT -5. The time now is 04:09 AM.

Page 2 of 2

Show 50 post(s) from this thread on one page